Re: RFC2385 (MD5 signature in TCP packets) support

[David S. Miller]

   From: David Schwartz <[e-mail]>
   Date: Fri, 15 Mar 2002 15:11:39 -0800
   
   On Fri, 15 Mar 2002 14:53:06 -0800 (PST), David S. Miller wrote:
   >There is no reason to not be doing this MD5 garbage in
   >userspace.  Whoever thought to do this in the protocol
   >itself was smoking something.
   
   	This same argument would apply to TCP itself, wouldn't it?
   
Not at all.

   >Maybe I'm missing something, but I see no reason this MD5
   >stuff belongs in the protocol and not in the APP.
   
   	How can a TCP-using application authenticate a RST?
   
Ignoring valid RST frames is illegal.  If this RFC says to drop valid
RST frames just because the MD5 is bad, this RFC breaks TCP.

Franks a lot,
David S. Miller
[e-mail]